Draft — scaffold pending review and sign-off by legal counsel. This document is not yet legally binding.

Signalya · Legal

Privacy Policy

How Signalya collects, uses and protects data when you use the app and website.

Last updated : {EFFECTIVE_DATE}

1. Who we are

To be completed / validated by legal counsel

Signalya is operated by {LEGAL_ENTITY_NAME} (“Signalya”, “we”), a brand of Iconiq Brains, with its registered office at {REGISTERED_ADDRESS}.

For privacy questions, contact us at privacy@signalya.app. Our data protection contact is dpo@signalya.app.

The data controller under applicable law is {LEGAL_ENTITY_NAME}. [[review]]

2. Data we collect

To be completed / validated by legal counsel

We collect only what is needed to run a trustworthy community reporting service:

  • Account data: user identifier, and where applicable phone number or email, optional display name and avatar.
  • Approximate location: the location of your reports is rounded to roughly a 300–500m zone on your device. We never display an exact location publicly. [[review — state whether precise location is stored internally]]
  • Report content: service type, issue type, provider and connection type (for internet), optional comment, timestamp.
  • Technical & device data: model, operating system, identifiers and diagnostics used for fraud prevention and stability.
  • Notifications: push token if you enable alerts.
  • Usage analytics: aggregated app usage events. [[review — list exact SDKs]]

    • 3. How we use data

  • Provide the service: show nearby status, cluster and validate reports, send alerts for your saved areas.
  • Preserve trust: limit spam, detect abuse and weight report reliability.
  • Improve the product: understand usage in aggregate and fix issues.
  • Communicate: notify you about important service changes.

    • 5. Sharing & disclosure

    We do not sell your personal data.

  • Publicly, only aggregated, area-level information is visible (report counts, status, timing) — never your identity or address.
  • Service providers: hosting and services that run the app (e.g. Supabase, a push-notification service). [[review — list processors]]
  • B2B insights: aggregated, anonymized trends only; never individual location data.
  • Legal obligations: where required by law.

    • 6. Location & privacy

    Location is core to the service, which is why we treat it carefully: rounded on device, shown only at area level, and never publicly tied to your identity. You can revoke location access at any time in your phone settings.

    7. Data retention

    To be completed / validated by legal counsel

    Reports expire and are archived automatically after a defined period. Account data is kept while your account is active. After deletion, personal data is erased within {RETENTION_DELETE_WINDOW}, except what law requires us to keep or data already anonymized. [[review — set retention periods]]

    8. Security

    We apply reasonable technical and organizational measures to protect your data (encryption in transit, access controls). No system is perfectly secure, but we work to protect your information.

    9. Your rights

    To be completed / validated by legal counsel

    Depending on where you live, you may have rights to access, correct, delete, restrict, object to and port your data. To exercise them, email privacy@signalya.app. See also the “Data & account deletion” page. [[review — adapt to local rights]]

    10. Children's privacy

    To be completed / validated by legal counsel

    Signalya is not intended for people under {MIN_AGE}, and we do not knowingly collect their data. [[review — set minimum age]]

    11. Third-party services & international transfers

    To be completed / validated by legal counsel

    The app relies on third-party services that may process data outside your country. We use appropriate safeguards for such transfers. [[review — list services & safeguards]]

    12. Changes to this policy

    We may update this policy. For material changes we will notify you in the app or by another appropriate means. The last-updated date appears at the top of this page.

    13. Contact us

    For any question about this policy or your data: privacy@signalya.app.